Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
File:                     a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa (raw, json)
Hash identifier:          w59riUJHpPzPgwPQY7qMCaSg5hvac9PcMSq9t95OfaQ=
Subject key identifier:   5A:CF:7A:F5:89:00:BC:85:E5:99:CE:9E:C6:1D:F3:74:FD:38:FC:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A864501DE867418A14200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1005:d130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:86:45:01:de:86:74:18:a1:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f8c36495-4e0e-44cb-a5ed-11a3ba8544bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:31:a5:65:9c:f6:e4:9a:d4:d4:a2:89:0b:
                    b5:e5:ed:0a:cd:9f:5c:47:61:5e:e3:0b:a3:4c:dc:
                    49:67:14:9d:11:a3:d6:71:81:19:a7:af:53:a6:65:
                    bd:ca:97:ba:b9:69:88:be:d3:25:58:ec:f1:ef:c7:
                    14:7d:fe:21:b0:a9:3b:69:be:92:1e:12:9f:5c:2c:
                    54:40:44:c9:ba:bb:44:59:21:0c:89:e1:c0:a6:86:
                    99:18:42:c5:07:84:9e:3d:3f:6c:88:66:90:c9:30:
                    39:f6:b3:dd:2b:43:91:1c:86:cb:99:b1:4b:79:b7:
                    70:d2:d0:67:b1:61:aa:12:37:ef:02:8a:a9:59:4f:
                    8e:9a:c8:a8:1d:82:28:5b:4f:b0:6b:1e:ef:31:d9:
                    cc:57:11:b6:fc:f6:ad:a5:34:d9:bf:36:11:c3:12:
                    37:7b:62:9c:59:0e:e0:13:cb:94:55:46:dc:3b:c5:
                    d4:bb:cc:96:5e:fe:5f:38:23:5e:5f:c6:c4:16:b0:
                    3e:28:67:d4:e3:57:fd:5e:d4:20:1b:2c:3d:2a:ec:
                    88:40:da:55:62:33:38:c5:9b:cb:96:1d:69:13:21:
                    f1:88:81:64:89:fc:48:24:44:69:c4:b8:af:75:20:
                    0e:19:f2:b4:40:3b:c5:4c:c8:bb:50:f6:ab:79:32:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:7A:F5:89:00:BC:85:E5:99:CE:9E:C6:1D:F3:74:FD:38:FC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:94:d9:bf:22:1f:ae:4a:5e:92:c4:40:33:69:32:c0:80:
         7c:ac:b5:f4:6b:29:01:c7:fb:09:87:2e:f6:41:aa:8e:fa:fc:
         27:20:b2:46:e9:96:9b:3b:4e:5f:88:7f:93:f6:f8:61:87:53:
         cc:5e:d4:f0:4f:6d:39:35:e7:b9:8a:48:e7:7f:07:ee:e7:69:
         5c:dc:4f:e2:94:52:91:6a:55:3b:80:9c:78:9b:44:c3:c2:5c:
         c2:b8:6f:df:50:4d:ed:68:35:41:85:be:fa:c0:12:d5:c0:ae:
         f8:a2:36:88:07:f7:8e:bc:48:87:c5:0a:7a:6c:fc:d2:17:f7:
         d1:93:5f:53:b3:6f:68:73:a1:6d:04:a6:1e:66:04:17:ed:cd:
         d9:54:c8:e7:d5:ab:4d:f6:53:df:27:24:9f:96:95:29:c4:59:
         78:0f:b2:7f:38:51:fb:13:7c:8f:46:f9:4e:65:f3:f7:4e:3b:
         31:8e:93:15:95:2d:ea:b0:d7:4f:22:b2:86:1a:fa:07:04:f5:
         94:80:24:55:91:b2:db:99:81:95:96:69:fc:c2:7a:7d:93:2c:
         8e:e5:a9:9d:0b:ea:13:9b:34:a0:09:b1:f7:65:f0:d8:0c:64:
         f1:fa:b1:a5:15:44:a9:0f:88:da:c7:c4:71:8b:48:67:0d:64:
         09:d5:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:23 2026 by rpki-client